
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
File: nmoKpDnP40ewT3RoQKbkNMUJsac.mft (raw, json)
Hash identifier: wq/X+lD0uooqV1ZYRfJXRcxhQzj2/ZBz2ZVZw4NOfVA=
Subject key identifier: CD:34:05:C3:8D:D1:11:52:1A:50:1C:52:77:46:92:12:5B:43:A1:DF
Authority key identifier: 9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7
Certificate issuer: /CN=A914DC56/serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
Manifest number: 020F
Signing time: Mon 27 Jul 2026 04:34:17 +0000
Manifest this update: Mon 27 Jul 2026 04:34:16 +0000
Manifest next update: Mon 03 Aug 2026 04:34:16 +0000
Files and hashes: 1: nmoKpDnP40ewT3RoQKbkNMUJsac.crl (hash: sJ/QXXM5k3KQeXFbGg4d1ovPAUObSzrcrsaMNGya0+E=)
2: 11A843B467D811EEA0543B5CC4F9AE02.roa (hash: KWP1UBy8boz7pJPm05GmDW82fCp04v/CANctx4p0U0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl
rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DC56, serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7
Validity
Not Before: Jul 27 04:34:16 2026 GMT
Not After : Aug 3 04:34:16 2026 GMT
Subject: CN=6a66dfc9-1eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:fa:36:f5:0f:36:e2:43:d0:78:9c:4c:dc:
0f:ad:28:66:c3:29:a6:0e:ce:1a:28:52:60:b6:32:
ff:c8:0c:e1:cb:94:85:4d:53:d0:0c:47:d9:36:d5:
37:da:47:3e:bd:8f:dd:b6:6a:20:9f:ef:d0:ce:63:
0d:9a:52:84:59:25:12:0a:96:22:4f:19:3c:90:c7:
ec:e8:14:27:40:3d:41:60:d8:24:b3:bd:79:75:c5:
9e:45:6c:f2:d8:01:72:9e:10:33:7e:82:b5:6c:3d:
08:d3:ef:24:85:ce:8b:5f:ca:a6:ed:c5:c1:a3:ca:
ba:10:44:5c:13:33:2a:95:56:7a:96:5c:ce:e5:e0:
02:01:16:bb:e7:51:88:0c:67:d5:0c:99:75:89:97:
0f:c6:5c:47:8a:9b:b3:e8:be:cd:92:13:89:1c:a7:
31:ef:41:72:ac:f9:da:23:3d:59:19:a3:5e:67:26:
3a:e5:52:6a:ef:85:11:7e:5e:10:ba:90:3d:c5:a7:
ee:67:57:33:80:6b:65:8f:f0:4a:f3:7f:54:15:2f:
6b:8c:b3:6e:3f:fa:60:28:91:f9:f5:06:bf:78:7b:
b0:ba:6a:ef:a5:cf:e7:7c:a0:5f:e1:18:55:97:86:
72:03:52:79:1f:0c:76:99:72:8a:88:70:6d:03:f3:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:34:05:C3:8D:D1:11:52:1A:50:1C:52:77:46:92:12:5B:43:A1:DF
X509v3 Authority Key Identifier:
keyid:9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c8:3f:c4:be:58:53:83:8a:d1:6e:84:2b:43:a2:bb:80:03:
0b:26:cd:cc:da:ba:0a:46:34:6c:0b:4f:1d:c7:57:e1:6a:47:
83:24:a0:ae:57:f1:7c:26:35:2e:c6:03:a8:04:0d:9c:07:01:
8b:4a:e6:90:7c:16:39:08:64:97:37:12:b2:56:57:44:13:43:
45:5d:82:69:47:0d:97:ac:e2:cf:92:92:4e:a2:7e:4a:4b:4c:
f1:21:86:7e:c6:3c:4a:bd:87:39:52:b8:72:19:99:61:3a:03:
0d:44:ee:5c:b3:f0:a0:b0:1f:3a:87:8c:9b:c3:40:da:ad:8d:
98:2a:90:70:d7:0c:ae:aa:da:a7:e8:ba:9e:42:58:e2:be:41:
c8:fb:28:8a:5d:de:b2:11:59:47:86:0b:76:29:e7:75:61:14:
95:1c:58:38:cf:63:b9:0c:85:39:dd:39:1b:dd:b1:df:88:c5:
c1:c4:f1:b1:57:4c:60:4f:08:34:a5:03:e2:2d:e3:45:c4:81:
c3:33:80:fc:b2:30:4d:c3:e2:e2:43:50:46:3a:cb:54:49:56:
6a:3f:e0:24:3a:14:a0:79:73:e3:e1:6b:46:48:45:a6:66:d4:
53:bf:f6:31:cb:81:cc:1a:d9:57:7d:ae:c0:18:ea:97:9d:ad:
96:fa:1f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:08:00 2026 by rpki-client